CWE:

	Tytuł	Data	Autor
Med.	QNAP Qcenter Virtual Appliance 1.6.x Information Disclosure / Command Injection	13.07.2018	Core Security Technolo...

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2021-07-21

Medium

CVE-2020-21935

Updating...

A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary code.

2021-07-20

High

CVE-2021-22125

Vendor: Fortinet Software: Fortisandbox

An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow an authenticated administrator to execute commands on the underlying system's shell via altering the content of its configuration file.

2021-07-09

Medium	CVE-2021-3637	Vendor: Redhat Software: Keycloak	A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly which could lead to a DoS attack.
Low	CVE-2021-3541	Vendor: Xmlsoft Software: Libxml2	A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.

2021-07-08

Medium	CVE-2021-34614	Vendor: Arubanetworks Software: Clearpass po...	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
High	CVE-2021-34611	Vendor: Arubanetworks Software: Clearpass po...	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
High	CVE-2021-34610	Vendor: Arubanetworks Software: Clearpass po...	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
Medium	CVE-2021-34616	Vendor: Arubanetworks Software: Clearpass po...	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
Medium	CVE-2021-34615	Vendor: Arubanetworks Software: Clearpass po...	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
Medium	CVE-2021-34613	Vendor: Arubanetworks Software: Clearpass po...	A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.

 

---

Copyright 2021, cxsecurity.com